How to choose the right UK security management qualification in 2026
Level, awarding body, assessment and time away from work all matter. A practitioner's guide to picking the security risk management qualification that fits your career.
Security management has become a profession with a clear qualifications ladder, and that is good news for anyone building a career in it. The harder part is choosing. Course titles sound alike, levels are not always explained and marketing tends to blur the differences that actually matter. This guide sets out the questions worth asking before you commit your time and money.
Start with the level you need
In England, regulated qualifications sit on a framework of levels. Level 5 sits alongside a foundation degree or HND, and Level 6 sits at bachelor's degree level. For most security managers, corporate security leads and people moving from policing or the Armed Forces into a management role, a Level 5 qualification is the right step. It proves you can apply risk management methods to real organisational problems without demanding the time commitment of a degree-level programme. Level 6 makes sense when a specific employer or contract asks for it.
Check who awards it and whether it is regulated
Ofqual regulation means the qualification has been through independent scrutiny and appears on the public register. That matters when an employer or client checks your credentials. The awarding body matters too. SFJ Awards is one of the most widely respected awarding bodies in the security and justice sectors, which is why Oakwood's Level 5 CSRM® (Certified Security Risk Manager), the SFJ Awards Ofqual-regulated security risk management qualification, is awarded through it.
Look closely at how it is assessed
Assessment tells you what a qualification really tests. Memorising definitions for an exam proves recall. Written assignments applied to real security problems prove judgement, which is what employers are paying for. The CSRM® is assessed through four written assignments of up to 5,000 words each, with tutor support and no exam. Learners often find the assignments become working documents they can use in their own roles.
Be honest about time away from work
Many good candidates never start a qualification because they cannot take weeks out of a demanding role. Ask how the learning is delivered. The CSRM® runs as five days in person at £1,995 including VAT or by distance learning at £1,800 including VAT, so you can fit it around operational commitments.
Make sure the syllabus matches the modern brief
A security manager in 2026 is expected to understand far more than guarding and access control. Insider risk, cyber, operational resilience and Martyn's Law all land on the security function. A syllabus that treats these as optional extras will leave gaps. Check the module list against the problems you actually deal with.
Check funding options
If you are serving or have recently left the Armed Forces, Enhanced Learning Credits can reduce the cost considerably. Oakwood is ELCAS approved, so eligible personnel can use their credits towards the CSRM®.
Compare before you commit
We have published a side-by-side guide comparing the CSRM®, SRMC® and CSMP® on level, awarding body, time and cost, with links to each provider's own website. Read the UK security risk management qualifications comparison and then check upcoming course dates when you are ready. If you would like to talk it through with a trainer first, get in touch.
More insights
Keep reading.
Related thinking from the Oakwood team.
Martyn's Law: what the Terrorism (Protection of Premises) Act actually asks of you
A plain-English breakdown of the new statutory duties, the Standard and Enhanced tiers, and where most organisations are underestimating the work.
Hostile reconnaissance: what to train your frontline to spot
Attackers almost always look first. The single highest-leverage investment in protective security is often the one that costs the least.
Mental Health First Aid: the quiet layer in your incident response
The first 72 hours after a serious incident are a welfare problem as much as an operational one. Most response plans don't reflect that.
